BRIEF DESCRIPTION OF THE DRAWINGS 

Additional objects and features of the invention will be more readily apparent from the 
following detailed description and appended claims when taken in conjunction with the drawings, 
in which: 

5 FIG. 1 shows a diagrammatic illustration of components included in various embodiments 

of the invention; 

FIG. 2 shows a diagrammatic illustration of a sector, sector stripe, and stripe as utilized in 
an exemplary embodiment of the present invention; 

FIG. 3 shows a diagrammatic illustration of the sector written indicator, sector stripe written 
10 indicator, and stripe written indicator, as utilized in an exemplary embodiment of the present 
invention; 

FIG. 4 shows a diagrammatic illustration of the logical sequence of steps or procedures 
executed in an embodiment of the present invention; and 

FIG. 5 shows a diagrammatic illustration of the logical sequence of steps or procedures 
1 5 executed in an alternative exemplary embodiment of the present invention. 

DETAILED DESCRIPTION OF EMBODIMENTS OF THE INVENTION 

Among the features and advantages provided by the invention include a background media 
surface scanner that performs predictive failure analysis and proactive defect management. The 

20 predictive failure analysis desirably reports incidents of recoverable and/or unrecoverable read and 
write failures. These read and write failures being indicative of media surface defects in rotatable 
mass storage devices, such as magnetic disk drives, optical disk drives, magneto-optical disk drives, 
linear and helical tape drives, and other devices where there is the possibility of media 
manufacturing defect, media aging, or damage during operation (such as for example, a transducer 

25 head crash onto the surface of a hard disk drive). 

The inventive system and method also provide proactive defect detection and management 
that takes necessary steps to recover media errors prior to the host attempting to access an media 
region, such as an affected hard disk drive sector. This helps to assure that for systems having large 
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initial storage capacity relative to amount of data initially stored, the remaining unused storage 
capacity will function properly when needed for additional storage demands. 

The inventive system and method further allows a storage media controller, such as an array 
controller or any other internal or external controller (including for example a controller function 

5 implemented by the host CPU), to perform non-destructive write testing on regions of the storage 
media, such as hard disk drive sectors, that have previously been written by the host. The 
non-destructive write testing is performed by the array controller reading the host data off the disk 
and saving it, exercising some stress patterns of writing against the disk drive, and then replacing 
the host data back onto the disk when the testing is complete. This permits the monitoring and 

1 0 testing of the integrity of the storage media without the need to wait for an actual data access request. 
It also will typically reduce the time required to complete an I/O operation because an I/O operation 
to a region having higher integrity will likely complete successfully with fewer retries. In 
conventional systems, where degradation may be progressive with time, waiting for an actual host 
data I/O request for a particular item of data in a sector suffering from progressive media surface 

1 5 degradation may result in the inability to recover the stored data. By testing for surface integrity 
frequently and before the read errors become unrecoverable, it is more likely that the data can be 
recovered. Even for redundant array of independent disks (RAID) systems where some redundancy 
is provided, maintaining the integrity and viability of each redundant portion increases the 
probability that should one portion of the redundant storage fail, its redundant portion will provide 

20 viable data for recovery and rebuilding of the array. 

In addition, in one embodiment of the inventive system and method, three indicators are used 
for various regions of the storage device. For rotatable storage media such as hard disk drives, 
floppy disk drives, optical disk drives, magneto-optical disk drives and the like where data on each 
device is organized or accessed by sectors, and for which data is written as stripes (such as RAID 

25 stripes) the inventive system method, and computer program utilizes a sector written indicator, a 
sector stripe written indicator, and stripe written indicator. These three fields are desirably 
maintained as indicator fields in metadata for sectors on one or more storage disks. The inventive 
structure and method may also or alternatively be applied to other types of memory or storage media 
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that may be susceptible to progressive or post-manufacture degradation. 

The inventive system and method also advantageously provides a media surface scanner that 
keeps track of errors encountered and reallocations performed, and optionally but desirably if pre-set 
or otherwise specified error and/or reallocation thresholds are exceeded, the storage controller 

5 notifies a storage system administrator or takes other predetermined or programmed action. 

This inventive system and method significantly reduces the occurrence of completion of host 
I/O requests being delayed due to media error detection and defect management methods. In prior 
systems, when a read request is issued to a disk drive or disk drive system (the most frequent type 
of mass storage devices), if the data can't be read on the first pass, the read operation is retried until 

1 0 successful or a time-out condition occurs, and it may take up to one-hundred or more passes retrying 
different parameters in the storage device controller's servo or read write channel in attempting to 
recover the data. If the requested data is unrecoverable after an acceptable time period and the 
storage device controller accesses another disk on which the data is stored, additional delays are 
incurred. The present invention solves these and other problems by providing a background task that 

15 examines all (or a selected set) of the sectors, such that the delay occurs in the background task. 
Data in the sectors for with I/O operations are delayed (presumably due to marginal or defective 
media) is then moved to a sector that doesn't require any (or an unreasonable number of) retries so 
that when a host system tries to access its data that was previously stored in the delayed sector, the 
host system is not subject to delays. Thus, the storage device controller is continually testing media 

20 storage areas (or other memory) in the background to detect and handle storage failure so that 
reading and writing to marginal or defective storage areas is avoided. By avoiding such areas, 
significant data retrieval delays, sometimes on the order of seconds, can be eliminated. In addition, 
where data may have been stored some time in the past, the inventive structure and method, may 
beneficially permit testing and relocation of the data before the data becomes unreadable as a result 

25 of further damage or deterioration. 

In a typical embodiment of the invention, the inventive method is implemented as a computer 
program or code, such as software or firmware or a combination thereof, executing on a processor 
of the controller (such as an internal or external controller, or an array controller when the storage 
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system involves a RAID storage system) and its associated memory as a background task during 
idle time. It is noted that the inventive method and computer program may be executed in any 
processor, such as the CPU of a stand-alone personal computer, so that the invention is not limited 
to separate controller devices or to particular storage systems. Alternatively, it may be run or 
5 executed manually by a system administrator or operation or invoked programmatically as a 
foreground process. 

An exemplary embodiment of a controller is illustrated in FIG. L The controller 100 
includes interfaces to host computer 1 02 and to at least one storage device 1 04. Typically the system 
will include a plurality of storage devices organized into a storage system, such as a storage system 
10 having one or more RAID storage arrays. When the storage devices are organized as RAIDs, the 
controller 100 is typically referred to as a RAID controller. The interfaces to the host and to the 
storage devices may be any of the types known in the art or developed in the future, such as SCSI, 
IDE, EIDE, USB, Fibre Channel, and so forth. 

The controller 100 includes a processor 106 and associated memory 108 (RAM and non- 
15 volatile NVRAM). Desirably, the inventive computer program (media surface scanner 109) is 
stored in NVRAM, or other non-volatile memory) so that the program is retained in the event of loss 
of power to the controller 100. Copies of the inventive computer program may also or alternatively 
be stored within the storage device so that it may be read into the controller and executed. As used 
herein, metadata refers to data that describes or is used to manage the user data contained on the disk 
20 drives or other storage devices. 

Metadata includes data that identifies a region of the storage device or system to which the 
indicator pertains, a group within the region, and a group written indicator are associated with each 
storage region. These correspond to a sector written indicator 1 10, a sector stripe written indicator 
1 12, and a stripe written indicator 1 14, such as when the storage system or device includes a data 
25 and/or parity stripe based RAID disk drive array. Metadata can be stored in several places. In the 
case of an array of disk drives, the controller 100 reserves space on the storage device 104 for its 
own purposes. The metadata can be stored in these reserved areas on the disks. If the disks support 
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extended sector formatting, metadata can be stored in each sector. Alternatively, metadata can be 
stored in nonvolatile memory 108 of the controller 100. 

Directing attention to FIGS. 2 and 3, sector 1 10 is a portion of a disk to which data can be 
stored. The sector written indicator 120 has the value "0" when the sector 1 10 has been formatted 

5 but not written to by a host write operation and has the value "1" when the sector 1 10 has been 
written to by a host write operation. These indicators may be established by a single bit or logic 
state or by a plurality of bits. (Other logic conventions may alternatively be applied.) Sector stripe 
1 12 is a collection of sectors similarly located on a plurality of disks. The sector stripe written 
indicator 122 has the value "0" when the sector stripe 1 12 has been formatted but not written to by 

1 0 a host write operation and has the logic state or value "1" when the sector stripe 1 1 2 has been written 
to by a host write operation. Stripe 1 14 is a collection of multiple sector stripes. The stripe written 
indicator 124 has the value "0" when the stripe 1 14 has been formatted but not written to by a host 
write operation and has the value "1" when the stripe 114 has been written to by a host write 
operation. The indicator fields 120, 122, and 124 is cleared (e.g., the logic state or value of "0") 

15 when a system drive is initially formatted for a host computer use. The controller 100 sets (e.g., 
changes the value to "l M )the indicator fields 120, 122, 124 when the host 102 initially writes to the 
related sector(s). Clearing the fields when the drive is initially formatted assures a known indicator 
state is written to what would otherwise be an unknown random (e.g. "0" or " 1 ") state. Setting the 
indicator fields when data is initially written (that is written in a host write operation for the first time 

20 after formatting) identifies the media portion, in this embodiment a disk media sector, as having 
actual data written to it. Identifying portions of the media that contain or store actual data is 
desirable because the data has to be maintained and occasionally changed. Also, if the data that is 
requested is stored on a sector that is currently being tested with stress patterns, the data has to be 
retrieved from another location. It is also advantageous to maintain information about which sectors 

25 contain actual data because that data should be available during testing for use by the host and for 
use to restore the sector after testing. 

The sector written indicator 120, sector stripe written indicator 122, and stripe written 
indicator 124 fields may be maintained as bytes as in embodiments utilizing extended sector 
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formatting. Alternatively, the sector written indicator 1 1 0, sector stripe written indicator 1 1 2, and 
stripe written indicator 1 14 fields may be implemented as a separate data structure, for example, as 
a data structure defined within a non-user data area of the storage device 104. 

As described earlier, sector scanning is preferably performed as a background processing 

5 operation by the controller 1 00 so as not to negatively impact normal I/O operations to the storage 
device 104. In one embodiment, background scanning and defect analysis is initiated when the 
storage controller (or processor that is to perform the analysis) workload falls below a preset 
threshold. This threshold may be fixed, programmable, dynamically adjustable, or set according to 
any other rules or algorithm. Typically, the threshold is set at between about 60% of capacity and 

10 about 80% of capacity for systems that are known to have a high utilization rate, more usually 
between about 40% of capacity and about 60% of capacity for systems having more moderate 
utilization rates, and in one particular embodiment at about 50% of capacity. Desirably, the media 
surface scanner 1 09 will traverse all sectors on the media so that any media defect wherever located 
can be identified; however, it will be appreciated that the media surface scanner 109 may be 

1 5 controlled so as to scan only selected portions of the media, to skip particular portions of the media, 
to scan selected portions of the media more or less frequently than other portions, or directed to scan 
according to other predetermined or programmatically constrained rules. 

Two different embodiments of media surface scanner 109 are now described. In a first 
embodiment, sectors not previously written to by the host computer 1 02 are scanned. Sectors that 

20 do not store RAID array control metadata may also or alternatively be scanned according to this 
method. 

FIG. 4 illustrates the sequence of steps or procedures executed to practice the first 
embodiment of the method. The embodiment is described in terms of procedures, sub-procedures, 
and/or steps. At step 200, the controller 100 reads data contained in a sector to a temporary storage 
25 location if data in that sector is to be saved or maintained. At step 202, the controller 1 00 writes data 
patterns, such stress patterns, to sectors (data and parity) contained in a stripe. Various stress 
patterns are known in the art of media testing, particularly for rotating magnetic media, and are not 
described in detail here. The controller 1 00 then reads back each sector (step204), and compares the 
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pattern written to the pattern read (step 206). The read may optionally be performed with any 
available drive error recovery capability reduced or disabled (step 208). Reducing or disabling error 
detector and recovery would desirably permit a storage device or portion thereof to be replaced 
before the number or nature of errors increased beyond the number or nature that could be recovered 
5 using known error detection and correction techniques. If no errors are detected, no further action 
is required for that stripe. However, if either a recoverable media error or an unrecoverable media 
error was reported by a drive on a sector, a defect management procedure is invoked (step 2 1 0) that 
reallocates the sector. The controller 100 then initializes the reallocated sector for host use 
(step 212) and the reallocated sector replaces the original sector before any further degradation 
1 0 occurs. In one preferred embodiment, error recovery capability is turned off or disabled during the 
inventive media scan procedure so that errors that might be recoverable during normal operation are 
detected. Detection of such normally correctable errors may be an early indication of some media 
surface damage or breakdown. By detecting such errors and reallocating the sector at this early stage 
while the number and pattern of errors are such that they can be corrected or recovered using the 
1 5 normal error detection and correction procedures, the storage system may be maintained to provide 
error free operation over extended periods of time. 

FIG. 5 illustrates the sequence of steps or procedures executed to practice a second 
embodiment of the method wherein in the media surface scanner 1 09, the scanning is performed for 
sectors that have previously been written to by the host, and alternatively or additionally to sectors 
20 that do store array control metadata. In this embodiment, the controllerl 04 reads each of the sectors 
(step 300) and temporarily stores the data read (step 302). The read operation may optionally be 
performed with drive error recovery capability reduced or disabled. If no errors are detected during 
the read phase of the test (step 306), the controller 100 will write back the read data to the sector 
(step 304). This is a non-destructive write test. If no errors are detected no further action is required. 
25 However, if a recoverable media error or unrecoverable media error was reported on a sector, a 
defect management procedure is invoked (step 306) that reallocates the sector. If the error was 
unrecoverable, then the controller recreates the data from redundant information using RAID 
techniques known in the art (step 307). The controller then initializes the reallocated sector for host 
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use (step 308) by writing the saved or recreated host data and replaces the defective sector with the 
reallocated sector (step 310). 

It is noted that when the data is not recoverable during a read operation, the controller can 
recreate the data using known data recovery or reconstruction techniques and procedures appropriate 
5 to RAID redundant storage systems. In situations where data is not redundantly stored, such as 
systems using a single storage device or disk drive that do not provide redundant storage, then such 
recovery may not be possible where data can not be read during the read operation. 

In either embodiment, the media surface scanner 109 tracks errors encountered and 
reallocations performed and if pre-set (or otherwise determined) thresholds are exceeded the storage 
1 0 controller 1 00 may optionally notify a storage system' s administrator so that the media itself can be 
replaced. For example, a RAID disk drive having a number of errors that exceeds such pre-set error 
thresholds may be swapped out and replaced by a replacement drive. Techniques for rebuilding such 
RAID storage systems are known in the art an not described in detail here. In another embodiment 
the controller 100 may automatically replace a RAID disk drive having a number of errors that 
1 5 exceeds a preset error threshold with a spare disk drive. A spare disk drive is a disk drive in a RAID 
storage system that is available to replace failed disk drives. 

While the present invention has been described withreference to a few specific embodiments, 
the description is illustrative of the invention and is not to be construed as limiting the invention. 
Various modifications may occur to those skilled in the art without departing from the true spirit and 
20 scope of the invention as defined by the appended claims. All patents and publications referenced 
herein are hereby incorporated by reference. 
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WE CLAIM: 

1 . A method for testing a data storage medium for defects, the method comprising: 
writing a data pattern to at least one predetermined region of the storage medium; 
reading back the written data pattern; 

5 comparing the data pattern written to the data pattern read back and identifying any error in 

the data; 

if an error in the data was identified, then: 

identifying a defective region of the storage medium; 
reallocating a new region of the storage medium; 
10 initializing the reallocated new region for access; and 

replacing the defective region with the reallocated region before any further 
degradation occurs. 

2. The method of Claim 1 , further comprising determining whether the predetermined region 
1 5 contains user data, retrieving the user data and storing it to a temporary location before testing the 

predetermined region, and writing the saved user data back to the predetermined region if no error 
is detected. 

3 . The method of Claim 1 , further comprising reporting errors to a storage device administrator. 

20 

4. The method of Claim 1, wherein the method is performed as a background task by a 
processor. 

5. The method of Claim 1, wherein the method is executed when the frequency of storage 
25 accesses is within a predetermined range. 

6. The method of Claim 1, wherein the writing of a data pattern comprises writing a stress 
pattern to the region. 
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7. The method of Claim 2, wherein the determining whether the predetermined region contains 
data is performed by examining a sector written indicator. 

8. The method of Claim 2, wherein the determining whether the predetermined region contains 
5 data is performed by examining a sector stripe written indicator. 

9. The method of Claim 2, wherein the determining whether the predetermined region contains 
data is performed by examining a stripe written indicator. 

10 10. A method of testing a data storage medium for errors in a region of a storage device, the 
method comprising: 

performing nondestructive testing of the region by reading data from a first region of a 
storage device and writing the data to a temporary location if the data is to be saved; 

writing the data read from the first region back to the first region; and 
15 if an error is detected either during the reading or during the writing, reallocating a second 

region, initializing the second region and replacing the first region with the second region. 

11. The method of Claim 10, wherein the method is performed on the first region if the first 
region is identified as a written region by a sector written indicator. 

20 

12. The method of Claim 10, wherein the method is performed on the first region if the first 
region is identified as a written region by a sector stripe written indicator. 

13. The method of Claim 10, wherein the method is performed on the first region if the first 
25 region is identified as a written region by a stripe written indicator. 

14. The method of Claim 10, further comprising reporting detected errors to a storage device 
administrator. 
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15. The method of Claim 10, wherein the method is performed as a background task by a 
processor. 

16. The method of Claim 10, wherein the method is executed when the frequency of storage 
5 accesses is within a predetermined range. 

17. A method for testing a data storage medium for defects, the method comprising: 
determining when a usage level of the storage medium is within a range of usage level for 

which background processing is permitted, and when the usage level is within the permitted range 
10 performing as a background process: (i) writing a stress data pattern to at least one predetermined 
region of the storage medium; and (ii) reading back the written data pattern; 

comparing the data pattern written to the data pattern read back and identifying and reporting 
any error; 

if an error was reported, then : 
1 5 identifying a defective region; 

reallocating a new region; 

initializing the reallocated region for access; and 

replacing the defective region with the reallocated region before any further 
degradation occurs. 

20 

18. The method of Claim 17, further comprising reporting the defective region. 

1 9. The method of Claim 1 7, wherein the determining whether the predetermined region contains 
data is performed by examining a sector written indicator. 

25 

20. The method of Claim 1 7, wherein the determining whether the predetermined region contains 
data is performed by examining a sector stripe written indicator. 



SJ09-2000-0075 US1 



14 



21 . The method of Claim 17, wherein the determining whether the predetermined region contains 
data is performed by examining a stripe written indicator. 



22. A method of testing a data storage medium for errors in a region of a storage device, the 
5 region associated with an indicator that indicates whether a host computer has written data to the 
region, the method comprising : 

determining that the host computer has written data to the region by examining the indicator; 
as a background process, performing nondestructive testing of the region by reading data 
from a first region of a storage device and writing the data to a temporary location if the data is to 
10 be saved; 

as a background process, writing the data read from the first region back to the first region; 
if an error is detected either during the reading or during the writing, reallocating a second 
region, initializing the second region and replacing the first region with the second region. 

15 23 . The method of Claim 22, wherein the method is performed on the first region if the first 
region is a sector on a disk that is identified as a written region by a sector written indicator. 

24. The method of Claim 22, wherein the method is performed on the first region if the first 
region is a plurality of sectors contained on multiple disks and is identified as a written region by 

20 a sector stripe written indicator. 

25. The method of Claim 22, wherein the method is performed on the first region if the first 
region is a plurality of sectors on a single disk that is identified as a written region by a stripe written 
indicator. 

25 

26. The method of Claim 22, further comprising reporting the defective region. 
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27. A computer program product for use in conjunction with a computer system, the computer 
program product comprising a computer readable storage medium and a computer program 
mechanism embedded therein, the computer program mechanism, comprising: a program module 
that directs the computer system or a controller coupled thereto to test a storage medium for defects, 

5 the program module including instructions for: 

writing a data pattern to at least one predetermined region of the storage medium; 
reading back the written data pattern; 

comparing the data pattern written to the data pattern read back and identifying and reporting 
any error; 

10 if an error was reported, then : 

identifying a defective region; 

reallocating a new region; 

initializing the reallocated region for access; and 

replacing the defective region with the reallocated region before any further 
1 5 degradation occurs. 

28. A computer program product for use in conjunction with a computer system, the computer 
program product comprising a computer readable storage medium and a computer program 
mechanism embedded therein, the computer program mechanism, comprising: a program module 

20 that directs the computer system or a controller coupled thereto to test a storage medium for defects, 
the program module including instructions for: 

performing nondestructive testing of the region by reading data from a first region of a 
storage device and writing the data to a temporary location if the data is to be saved; 
writing the data read from the first region back to the first region; 
25 if an error is detected either during the step of reading or during the step of writing, 

reallocating a second region, initializing the second region and replacing the first region with the 
second region. 
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29. A computer program product for use in conjunction with a computer system, the computer 
program product comprising a computer readable storage medium and a computer program 
mechanism embedded therein, the computer program mechanism, comprising: a program module 
that directs the computer system or a controller coupled thereto to test a storage medium for defects, 
5 the program module including instructions for: 

determining when a usage level of the storage medium is sufficiently low to allow effective 
background processing; 

as a background process, writing a stress data pattern to at least one predetermined region 

of the storage medium; 
10 as a background process, reading back the written data pattern; 

comparing the data pattern written to the data pattern read back and identifying and reporting 
any error; 

if an error was reported, performing the steps of: 
identifying a defective region; 
1 5 reallocating a new region; 

initializing the reallocated region for access; and 

replacing the defective region with the reallocated region before any further 
degradation occurs. 

20 30. A computer program product for use in conjunction with a computer system, the computer 
program product comprising a computer readable storage medium and a computer program 
mechanism embedded therein, the computer program mechanism, comprising: a program module 
that directs the computer system or a controller coupled thereto to test a data storage medium for 
errors in a region of a storage device, the region associated with an indicator that indicates whether 

25 a host computer has written data to the region, the program module including instructions for: 

determining that the host computer has written data to the region by examining the indicator; 



SJ09-2000-0075 US1 



17 



as a background process, performing nondestructive testing of the region by reading data 
from a first region of a storage device and writing the data to a temporary location if the data is to 
be saved; 

as a background process, writing the data read from the first region back to the first region; 
5 if an error is detected either during the step of reading or during the step of writing, 

reallocating a second region, initializing the second region and replacing the first region with the 
second region. 

31. An apparatus for storing data, the apparatus in communication with a host computer and 
10 capable of having data written to the apparatus and data read from the apparatus by the host 

computer, the apparatus comprising: 

a data storage medium organized into discrete regions; 

a storage medium controller that reads data from and writes data to the storage medium; 
an indicator that a discrete region has been written to by the host computer; and 
1 5 a media surface scanner that performs non-destructive testing by writing a data pattern to at 

least one predetermined region of the storage medium; 
reading back the written data pattern; 

comparing the data pattern written to the data pattern read back and identifying and reporting 
any error; 
20 if an error was reported: 

identifying a defective region; 

reallocating a new region; 

initializing the reallocated region for access; and 

replacing the defective region with the reallocated region before any further 
25 degradation occurs. 

32. The apparatus of Claim 3 1 , wherein the storage medium comprises a magnetic storage disk. 
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33. The apparatus of Claim 3 1 , wherein the storage medium comprises an array of magnetic 
storage disks. 



34. The apparatus of Claim 3 1 , wherein the storage medium comprises an optical storage disk. 

5 

35. The apparatus of Claim 3 1 , wherein the storage medium comprises an array of optical storage 
disks. 

36. The apparatus of Claim 3 1 , wherein the media surface scanner is stored on the host computer. 

10 

37. The apparatus of Claim 31, wherein the media surface scanner is stored on the storage 
medium controller. 

38. The apparatus of Claim 32, wherein the storage medium is divided into sectors, and the 
1 5 indicator indicates whether at least one sector has been written to by the host computer. 

39. The apparatus of Claim 33, wherein the disks in the array are divided into sectors, and the 
indicator indicates whether at least one sector has been written to by the host computer. 

20 40. The apparatus of Claim 33, wherein the array of disks comprises a redundant array of 
independent disks. 

41 . A method for testing a data storage medium for defects, the method comprising: 

as a background procedure by a processor acting as a controller when processor utilization 
25 is below a predetermined threshold : (a) writing a stress data pattern to at least one predetermined 
region of the storage medium; (b) reading back the written data pattern; (c) comparing the data 
pattern written to the data pattern read back and identifying any error in the data; and (d) if an error 
in the data was identified, then: (i) identifying a defective region of the storage medium; (ii) 
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reallocating a new region of the storage medium; (iii) initializing the reallocated new region for 
access; and (iv) replacing the defective region with the reallocated region before any further 
degradation occurs; and 

determining whether the predetermined region contains user data by examining at least one 
5 of a sector written indicator or a sector stripe written indicator, and retrieving the user data and 
storing it to a temporary location before testing the predetermined region, and writing the saved user 
data back to the predetermined region if no error is detected. 

42. A RAID controller, operatively connected to a host computer and a plurality of magnetic 
10 storage disks, wherein the storage disks are divided into sectors, such that the RAID controller 
enables the host computer to read and write data to the storage disks, the RAID controller comprises 
a media surface scanner that operates as a background process to perform nondestructive write 
testing to the sectors, arid, upon finding defects in the sectors, reallocating sectors to replace the 
sectors having defects, and, when a sufficient number of defects has been detected, reports the 
1 5 defective sectors to a host computer. 
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